What I’d love to know is: many fraudulent users try out different cards one after the other. How is it not the default case that Stripe blocks these users? It’s the most common pattern we see, easily identifiable by the repeated failed attempts with different cards.